Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E69F36A455111F191AB6CDDCE1D38B0.roa
File:                     5E69F36A455111F191AB6CDDCE1D38B0.roa (raw, json)
Hash identifier:          W09Cn3PHHbzuDAgN3tq4c1DG1g65C1kqpBbiTkkxkvs=
Subject key identifier:   01:F8:A6:8E:F8:07:CF:0B:D1:78:86:FD:CC:B5:81:88:CC:CF:9F:F5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B082
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E69F36A455111F191AB6CDDCE1D38B0.roa
Signing time:             Fri 01 May 2026 11:32:01 +0000
ROA not before:           Fri 01 May 2026 11:31:56 +0000
ROA not after:            Wed 15 Jul 2026 11:31:56 +0000
asID:                     135377
IP address blocks:        156.229.25.0/24 maxlen: 24
                          156.229.28.0/24 maxlen: 24
                          156.229.50.0/24 maxlen: 24
                          156.229.54.0/24 maxlen: 24
                          156.229.236.0/24 maxlen: 24
                          156.229.247.0/24 maxlen: 24
                          156.242.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110722 (0x1b082)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May  1 11:31:56 2026 GMT
            Not After : Jul 15 11:31:56 2026 GMT
        Subject: CN=69f48f31-abf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:5f:bc:e0:9a:30:3e:fa:41:1c:0f:f5:3b:
                    03:c8:2a:eb:08:2a:e7:7e:39:00:90:d2:f0:c5:fd:
                    44:03:a6:7a:21:71:d0:0c:d7:1e:d3:b2:c6:68:99:
                    5e:5c:75:9c:39:b5:9d:9b:c6:84:b9:51:10:dc:30:
                    85:62:ec:5d:b1:06:47:9e:13:de:55:00:8f:bf:da:
                    4a:ed:b7:c4:bf:fc:3e:d2:b3:eb:6e:82:b9:f7:76:
                    14:f4:0b:86:c3:d3:20:f3:48:00:68:64:1b:58:e4:
                    c3:8b:cc:46:ee:50:aa:da:91:b3:46:15:47:16:37:
                    20:22:0a:87:c1:28:98:25:6a:b2:0d:12:a0:94:1d:
                    17:22:57:33:fc:1a:08:ca:13:a1:f6:de:03:7e:5a:
                    a9:63:98:b4:8c:86:8c:08:be:d6:8b:52:74:2e:c5:
                    8b:70:85:fc:93:08:72:37:7c:85:1e:4f:00:59:2f:
                    e1:e2:59:a0:38:02:1d:5b:fa:f7:28:26:98:76:06:
                    12:17:bd:c8:d3:f2:8d:28:c8:34:dc:b8:e3:cc:7a:
                    b9:a0:c3:f8:a3:a9:13:89:04:2e:45:b9:91:bb:8d:
                    21:15:da:83:f6:fd:05:06:24:f0:cd:0f:24:74:fe:
                    9d:4e:cb:9e:d6:d5:3e:72:e4:b8:18:0d:23:5b:9d:
                    b1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F8:A6:8E:F8:07:CF:0B:D1:78:86:FD:CC:B5:81:88:CC:CF:9F:F5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E69F36A455111F191AB6CDDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.25.0/24
                  156.229.28.0/24
                  156.229.50.0/24
                  156.229.54.0/24
                  156.229.236.0/24
                  156.229.247.0/24
                  156.242.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:8e:d3:e3:bb:6d:8e:93:f9:69:f8:d3:44:7d:ad:b2:eb:c6:
         c1:ec:08:96:1a:e4:4a:13:c0:00:71:91:d6:f7:f6:d2:0f:34:
         f9:02:d4:27:a5:48:48:d5:d1:1e:8b:5e:55:3e:e8:48:96:15:
         82:61:7b:7e:da:35:2e:3c:2c:25:4c:ea:5c:8d:b6:5b:9d:e7:
         8d:36:f9:68:7a:c7:0a:a7:f9:b0:2f:8d:a3:f4:45:12:83:e4:
         6a:52:b9:75:6c:77:ca:27:63:6c:34:20:53:34:03:06:7d:ba:
         de:c6:8e:03:d9:9c:3a:05:27:ff:c5:aa:fa:64:df:d4:b3:a7:
         1d:7a:ae:e6:6c:9b:fd:91:05:5a:36:23:97:4f:a2:98:89:a2:
         68:2e:b9:8b:2a:d5:1b:a4:2c:dd:ab:9e:91:8c:30:5b:ec:93:
         2e:f3:87:bf:ad:4a:41:82:0d:54:6b:ad:b4:29:62:78:92:86:
         f8:91:69:e2:21:2c:07:70:b3:6b:bf:90:47:7d:44:de:8c:27:
         45:1e:11:d2:65:18:78:3f:27:91:e5:1a:c3:38:3c:08:d8:55:
         4a:1d:e0:ef:0b:3b:07:aa:fa:7d:d2:d6:85:59:39:7d:4f:79:
         ac:f7:d4:db:9d:6f:ea:22:ff:e1:80:f1:f3:e8:b4:7b:a1:7f:
         96:6e:58:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:13 2026 by rpki-client